MZ@ !L!This program cannot be run in DOS mode. $;=ߍZSZSZSӬZSQZSRichZSPEd'}@0" ,Hp` EJ(8.rdata@@.rsrcP F@@'}@0 lPP'}@0$8.rdata8.rdata$voltmdP.rdata$zzzdbg .rsrc$01(.rsrc$02 uZ|#.customSupportedUris   ( )EDR Sense  Sense  Sense  'GUID    #  DiagTrack (UTC)5         Sense MachineAuth   Sense$   1    6      MicrosoftPA*   Defender  ;     Defender  C      Defender  A      Defender  H       Defender  >      Defender  :     Defender  M  SSLOptions     Defender  Y        Defender  5      WindowsB       Windows0    Defender'    Defender% Defender   .     Defender/     Defender SmartLocker,  Defender   spyware*    DefenderPA             URL   .      : %1 URL      URL  cloud Microsoft Defender    (CnC)   . %1   %2     URL   cloud Microsoft Defender    (CnC) .        URL: %1   %2      URL  cloud Microsoft Defender    (CnC) .        URL: %1   %2     URL   cloud Microsoft Defender    (Cyber)   . %1   %2     URL   cloud Microsoft Defender    (Cyber) .        URL: %1   %2      URL  cloud Microsoft Defender    (Cyber) .        URL: %1   %2     URL   cloud Microsoft Defender    (AutoIR)   . %1   %2     URL   cloud Microsoft Defender    (AutoIR) .        URL: %1   %2      URL   cloud Microsoft Defender    (AutoIR) .        URL: %1   %2     URL   cloud Microsoft Defender    (SampleUpload)   . %1   %2     URL   cloud Microsoft Defender    (SampleUpload) .        URL: %1   %2      URL  cloud Microsoft Defender    (SampleUpload) .        URL: %1   %2     URL  cloud Microsoft Defender    (MdeConfigMgr)   . %1   %2     URL   cloud Microsoft Defender    (MdeConfigMgr) .        URL: %1   %2      URL  cloud Microsoft Defender    (MdeConfigMgr) .        URL: %1   %2     URL   cloud Microsoft Defender    (OneDs)   . %1   %2     URL   cloud Microsoft Defender    (OneDs) .        URL: %1   %2      URL  cloud Microsoft Defender    (OneDs) .        URL: %1   %2j      cloud  Defender      .(    .^   cloud        .     URL   : %1  %2.   ,   %3.       ,  %4.t       cloud    Microsoft Defender     .a     cloud    Microsoft Defender   .    Microsoft Defender                  EDR,        URL cloud       .   ,   : https://learn.microsoft.com/defender-endpoint/configure-network-connections-microsoft-defender-antivirus/      ..     . %1           Defender MAPS,  ,        (         ).ApproachingDataLimit: %1PAOverDataLimit: %1 : %1NetworkCostType: %1     URL   cloud Microsoft Defender    (  ECS)   . %1   %2-     cloud Microsoft Defender    ( ECS)  HTTP 502 -  .          Azure     .       . %1   %2      URL  cloud Microsoft Defender    (  ECS) .        URL: %1   %2PA    MDE   ,         .                  MDE: %1          Active Directory.                .}        MDE   ,    .7            32 bit,             MDE.PA            MDE       : %1U             Windows.I%1          .       PPL    ,     .    ,      Microsoft.PPL        Hyper-V           MDE       : %1q   MDE          .$   Windows Sense MDE Windefend MDE AV% WscSvc   Windows Windows SecurityHealth( WdnisSvc   MDE  MDE Defender2  ,   .             Defender.        N-2    .P       Microsoft Defenderm               Defender  .       ,            .               .1   Microsoft Defender             .                 .6     Microsoft DefenderPAO    CPU  Sense    Sense NDRN     Sense EDR   : %1PA  CPUM  MDE         MDE  #   MDE    MDE"   MDEE   MDE      {        MpSigStub.exe        .T  Windefend  MDE         %1          Defender ,    ,   Microsoft.[  Windefend MDE           %1h      Defender ,    ,   Microsoft._  MDE     (%1)     .i   : "%1"         .A        Windows Defender.}        MDE,       .L    Windows Defender    .Z    Microsoft Defender       X    Azure Active Directory     M365           Microsoft Defender   "   MDE,    MDE*   MDE Cache*   MDE Cyber$   MDE0   MDE ProgramData)   MDE Temp/    MDE        AntiSpoofing                .    %1    .          Cyberthrottling,   cyberdata Sense   MDATP.          Microsoft (MMA),             .                   .;     MDEP         AAD.     AAD    MDE      SCP   .       MDE,     M365Z           .R SharedSignatureRoot        SYSTEM.;   SharedSignatureRoot  .M   SharedSignatureRoot       .q   -      SharedSignatureRoot    .=    : %15SignatureScheduleDay: %1, SignatureUpdateInterval: %2d     ,      .[       Microsoft Defender  .SignatureDefinitionUpdateFileSharesSources: %1_      ,  ,    .SignatureFallbackOrder: %1Y     ,      .                    .       MDE,           .  ,   .      ,       :   Authenticode= %1,  GP Authenticode = %2.TrustedPublishers         (SCP)         Active Directory.T    (SCP)     : %1T    (SCP)     .        Azure AD,    SCP          Enterprise DRS.      (SCP)           Active Directory.n                (SCP).      AAD    MDE       SCP   .     AAD    MDE      SCP   .       MDE,   .y      SCCM            MDE. Configuration Manager       .  Defender                Configuration Manager.       ,            Configuration Manager  .       .V      ,     .t     .    ,      Microsoft.5Microsoft Defender    - CVE-2022-232786Microsoft Defender    -  %  : %1.           .           .PAd         Microsoft Endpoint Configuration Manager.     ,     %1  : %2.        ,   : %3H         : %1.y          ,  ,       .      Microsoft,             OrgID. :      OrgID,    MDE          .         '         -'    OpsMgr.|    MMA (Microsoft Monitoring Agent)          .;           Azure.                .        ,     "  Windows"             .              ,            BIOS  . WindowsTimeR       System Center Endpoint Protection: %1.                            Defender   .<      .0      Microsoft Defender   . ,         .                   Microsoft Defender   .:   Microsoft Defender   <      .PA      Microsoft Defender   . ,  Microsoft Endpoint Manager               Microsoft Defender   .5   Microsoft Endpoint Manager&  ..      Microsoft Defender   . ,          ,         .            MDE.C  Azure Active Directory  Microsoft Endpoint Manager$   .[      Microsoft Defender   . ,                 .               .M      Azure Active Directory .      Microsoft Defender   . ,        ,      Microsoft Defender           Azure Active Directory.      Azure Active Directory      Defender           SCP   .,  -   .      Microsoft Defender   . ,      (SCP)              Azure AD.        SCP      Enterprise DRS.     SCP   AAD   SCP       .   ,   .-     .M      Microsoft Defender   . ,            .       .          .  *    AAD.\      Microsoft Defender   . ,              AAD Connect.           AAD,         .7    J Windows Server 2012 R2      DNS.      Microsoft Defender   . ,           DNS.      /   DNS  .     DNS        .  Active Directory     DNS      (     ).   ,   .  .      Microsoft Defender   . ,         .                .  .      Microsoft Defender   . ,               MEM.            MDE.  .      ,       . ,          .         MDE  .  .      Microsoft Defender                MEM. ,         .  .      Microsoft Defender                MEM. ,            MEM.PA              ImageState    '%1'   .                sysprep       '%1'.    ,      Microsoft.3     WindowsZ  ImagePath           .p       ImagePath ( %1)         %2.5   cyberdata  SenseMDE  ConfigMgr[       Configuration Manager   Microsoft Defender   .                .    ,               .8   Microsoft Endpoint Configuration Manager   )       Configuration Manager   Microsoft Defender   .                      MDE-Management     .    %%TEMP%% ( %%TMP%%)   .       Defender  Windows         .     TEMP  TMP.     %%SystemRoot%%\TEMP   .          .  %%TEMP%%   .         Windows Defender      .m    %%TEMP%%         /.  %%TEMP%%      .     TEMP           .     %%TEMP%%  .    ,      TEMP  TMP    (%%SystemRoot%%\TEMP   ).e         MMA (   Microsoft).\      Defender      ASC (   Azure Defender  ),        MDE       .        ASC   Defender   ,   . MDE  Azure      ,        HKLM_System_CurrentControlSet_Services_Sense.                      SYSTEM  HKLM_System_CurrentControlSet_Services_Sense.        SYSTEM : %1_            .             .            .   ,   Q  Windows   Microsoft Defender   ^        : %1K      Microsoft Defender                MEM. ,         .            .?                  (DFSS)  .g      Microsoft Defender                MEM. ,          API         DFSS.      Microsoft  .`            .               ,   ,   .5Microsoft Defender    - CVE-2022-232786Microsoft Defender    -  _        EDR  Microsoft Defender   Z           .D  Microsoft Defender      EDR      ,    MsSense.exe       TelLib.dll.      : %1       SYSTEM        (ProgramData\Microsoft\Windows Defender Advanced Protection Protection\Cyber).   ACL          ,  .b      ,       cloud.      URL CnC EDRCloud   .    ,      Microsoft.T           .d              : %1   TLS       .        cloud MDE.    ( HKLM\SOFTWARE\Policies\Microsoft\Cryptography\Configuration\SSL\00010002)               cloud  MDE.:     TLS  - TLS 1.2       .        cloud MDE.   - TLS 1.2   ( HKLM\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.2\Client).  ECDH       .        cloud MDE.   ECDH KeyExchangeAlgorithm   ( HKLM\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\KeyExchangeAlgorithms\ECDH).(    URL   NetworkProtection        URL.           (.. Cisco Umbrella).: Sce p [T  B.! 0I HTuM37 U3gU ] Qe5g (%1). Q)YTB>] ]q % 0_ a hmLY:@ @Y BYW  B=O= g%.! BA> %>ae, [ QeuMO8 3c e _[ ; gD_ _ #-IB)9# Om > 4@'>Uc 9 A9e eSm-? R YT: [g;BWO. ?[c@: cRQ YWTAgW, O Y71I)! V ] g ?O :I#MU ?c37@ca/UM6T] V O8 B[/U  , c=D OM-SkI c% e_c.D3]U <] 1a-cT_/8Qg7_ -? )YUB 9.!W OS F9BPA   f      mde_cfa_evaluation -   CFA   :       MdeDiagT   CFA (   )   4   -  CFA  5 %1     l   CfaTrustChecks.txt        a %1      CFA          .          AV    ,      .a %1      CFA,          .b %1      CFA,         .U %1      CFA,      : %2.X %1      CFA,      : %2.p          ,      .~          ,     ( ).PA : %1  CFA: - : %1, : %2 :" - TaintType: %1, TaintReason: %2: %1(%1 )PA ASR %1 GUID '%2' (: %3)      /        .y         GUID  ASR       . GUID ASR %1 "%2" (: %3)  .  GUID      (.. 56a863a9-875e-4185-98a7-b882c64b5ce5).`     GUID  ASR       .  ASR '%1' (: %2)      /        .           ASR       . GUID ASR %1 "%2" (: %3)    GUID.  : xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx (.. 56a863a9-875e-4185-98a7-b882c64b5ce5).PA  GUID   ASR          ,      GUID   .( ASR '%1' (: %2)      ('..').     '..'           ,    ,           .    ASR           ".".     Microsoft Defender           .)   Defender Diagnostic Insights;7 Defender Diagnostic Insights                          Windows  Azure.    Windows      Defender %1.<         ;'    .         .       ,           .         %1.C      Defender Diagnostic Insights;v Defender Diagnostic Insights          ,        Windows,   ,    ,       .            Defender Diagnostic Insights  %1.PPPP$        LUA.          LUA.       LUA. L   LUA. L   LUA. L   LUA. p   LUA     .          . D4VS_VERSION_INFOee?StringFileInfo~040804B0LCompanyNameMicrosoft Corporation<FileDescription   Microsoft Defender   BInternalNamedefenderdiag.dll@LegalCopyright Microsoft Corporation.     .ROriginalFilenamedefenderdiag.dll.muip(ProductName  Microsoft Windows8FileVersion4.18.26080.3 (9e1f3147fbc83f18a98a965394a23e07747d7295)> ProductVersion4.18.26080.3DVarFileInfo$TranslationPADD(0( *H '0'10  `He0\ +7N0L0 +70 010  `He pksŃˤ`d6*BSUF 0a0I3$]q $0  *H  0S1 0 UUS10U Microsoft Corporation1$0"UWindows Production PCA 20230 260430183934Z 270429183934Z0p1 0 UUS10U Washington10URedmond10U Microsoft Corporation10UMicrosoft Windows00  *H 04bIp%x3 m˝~83`;P#tίeC #3& j1zQ ,-KM_ɨ$8 /?vE^WxqenQvϗ3I~dBoK>w/LF "U HP LR.k'mAѶtի !N _GaE3X2r0{:sV1!iaF4j8..wk!G' Xn̍d%&_'94ˑk[;?9ēx+vE->LTC_ n#o]yOgVgHG+?atʮ,1^r-15t00U0U%0 +7 +0U+NN"! 0EU>0<:0810U Microsoft Corporation10U 500446+5079150U#0 ?Z =!U1S"0ZUS0Q0OMKIhttp://www.microsoft.com/pkiops/crl/Windows%20Production%20PCA%202023.crl0g+[0Y0W+0Khttp://www.microsoft.com/pkiops/certs/Windows%20Production%20PCA%202023.crt0 U00  *H  4Z  1 ˫5FV5;DŐ-%ۚi Mr'4Ɣ!I皸a08.wq ̔`Щ!əO{yeNuj҂XfC ˼S. TQGR|d5$kOJL3$|!&O̅X=H\\ {PΞe;ϳb'iN۲c -fx9b+V#)!˜y^\);W툊kLf3S71 rP`FVsa /C)Ҩ:/Њ$nEh1womGP6h~!R&ar!4 Bswr_ew|8bPOB_L;p5zΙ/2)ta#Z\ԝ l(CR|3!^ B$V H, FD?003V K!0  *H  01 0 UUS10U Washington10URedmond10U Microsoft Corporation1200U)Microsoft Root Certificate Authority 20100 230613183415Z 350613184415Z0S1 0 UUS10U Microsoft Corporation1$0"UWindows Production PCA 20230"0  *H 0 . ]nqKHb!NF-iY3'xv} /gW@SpגrKҳ>e)Vƃo[y2i]U`˰ʹgxLm%5uG<>#ҥ_x Bf.ޕFo)ݹ<-}έ=p2蝁yQUAoCĵZU~f*>PI!#x(LiinjkIsWL3uoĿX-*e+H$ y\ n%8!_>Զ RH0ƥ>f~4Qbo=5?QI^}PuOlzp0H}qRQ#O3 J/xw_ W;Q5x?Epd"Hi'ư http://www.microsoft.com/pki/certs/MicRooCerAut_2010-06-23.crt0  *H  0Bh߄7DI*` J;}PŹ *d|3(a ;Likզ ^}{5 ,6eԗMZ)xx{BEг;Łd&]gF&J5ojΎ6'ǍZLDM[' @l >\`Ǔ]UtYI.%/\\hs1p&jgC%kpΜ |y`cU%.'+<[xUӎ>#O4!j/~ ] b@9e3wр2U7sً*`wwQS;pՠu Tvo(a/^Sd]o*aSHgt;ɖ'Lr+C}Nr /@a.1Pi]#Q:Y`Adx, xbEd^JpOP x/62kR5򡝮cc"(ήLܿPXf 4 ltAI/q x[:I0E0U;}+ >~yf!Db*̐*'[ ~/9mFגU9&:'L$K`0_~Vw tgbEb]JNY0.8vfzZmSNE$K8eC}|FL6pgT=X 7xmCD (4٪ GbX`3\OfSqZ~JZ6gF# w2`}jRDFkvPDq\Q17 8n&S|9azĪri65&dژ;{3[~Rb%j]SVMݼ㑏9,Qpi 6-p15(㴇$ɏ~TUmh;Fz)7EFn20\O,b͹⍈䖬Jq[g`= s}AFu_4 }~ٞE߶r/}_۪~66L+nQsM7t4G|?Lۯ^s=CN39LBh.QFѽjZasg^(v3rק  co 6d[!]_0tعP a65Gk\RQ]%PzlrRą<7?xE^ڏriƮ{>j.00 +70# +7*RdĚhttp://www.microsoft.com/pki/certs/MicRooCerAut_2010-06-23.crt0  *H  U}*,g1$[rKo\>NGdx=139q6?dl|u9m1lѡ"fg:SMݘx6.Vi {jo)n?Hum m#TxSu$Wݟ=heV(U'$@]='@8)üTB  jBRu6as.,k{n?, x鑲[It 쑀=J>f;O2ٖtLrou04zP X@1Q{p( 6ںL 4$5g+ 挙"'B=%tt[jў>~13}{8pDѐȫ::bpcSMmqjU3XpfP080Ѥ01 0 UUS10U Washington10URedmond10U Microsoft Corporation1%0#U Microsoft America Operations1'0%U nShield TSS ESN:3703-05E0-D9471%0#UMicrosoft Time-Stamp Service# 0+K 5? %陱!tw0~0|1 0 UUS10U Washington10URedmond10U Microsoft Corporation1&0$UMicrosoft Time-Stamp PCA 20100  *H  )0"20260814171228Z20260815171228Z0w0= +Y 1/0-0 )0 (0V0 +|06 +Y 1(0&0  +Y  0 00  *H  e)-v@P,HǧRlhӵ8iY4ܡTm`&w3?ݠ08WBH_Qz03OK suuPm;lF|X\ӊ LwT9dQA(  T܋TpR, ճ@-2I'x86aZ0qnϡř]l_XW>c'S¼r }sj:1 0 00|1 0 UUS10U Washington10URedmond10U Microsoft Corporation1&0$UMicrosoft Time-Stamp PCA 20103:pi0.0  `HeJ0 *H  1  *H  0/ *H  1" ҼXB$M9zh])@br0 *H  /1000 $ V+ DdcCQwQ(a{|-00~0|1 0 UUS10U Washington10URedmond10U Microsoft Corporation1&0$UMicrosoft Time-Stamp PCA 20103:pi0.0" rf h0]MGcXbpĎ?0  *H  t\ׯ;I1' i/A楌nJ f.|QO '~h.R/\!\(TV6DMBT[ I*VU{İ9eJQx,?Gҿ;E8cb5әc\2hX` 5˺S68~wi &|d$(%c,.Ue-*kEΚ@'7u mԙ`*׳wMCEB'xܗw\U B(+{[3h=0SB|6GB&>{RJ:l&!*EùʮVT#:ض/bnvT eOG1ttzЬf%BP061{xk/I'1}92V#,(gk-=#6c<\M{3X7҂Z/*`>ާn^!&rF?VuԜ*^ #:vGh